Description
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
References
- 1014203 vdb-entry
- 13940 vdb-entry
- VU#800829 third-party-advisory
- oval:org.mitre.oval:def:605 vdb-entry signature
- MS05-033 vendor-advisory
- 15690 third-party-advisory
- 20050614 Multiple Vendor Telnet Client Information Disclosure Vulnerability third-party-advisory
- oval:org.mitre.oval:def:784 vdb-entry signature
- oval:org.mitre.oval:def:1132 vdb-entry signature